https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPINFO-will-it-stop-services/m-p/146134#M23156 <P>You dont need to worry, because migrate export is never done on gateway, only management, so it would stop mgmt access for probably few mins. If you wish to be on safe side, you can simply run something like cpinfo -o /var/log/cpinfo.out</P> <P>Just to clarify, as some people get confused about this...if you do say cpstop on gateway, it will unload the policy. If you do SIC reset , it will load initial policy, which would literally block everything, except ssh and web UI, but only on port 443, thats it.</P> <P>Hope that makes sense.</P> <P>Andy</P> Tue, 12 Apr 2022 19:29:07 GMT the_rock 2022-04-12T19:29:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPINFO-will-it-stop-services/m-p/146132#M23155 <P>When I run CPINO, I see the following:</P><P>&nbsp;</P><P>CPinfo Creation...</P><P>Collecting information...: 100%<BR />Starting migrate export verification stage...<BR />Migrate export verification stage succeeded.<BR />Starting migrate export.<BR />This process can take a few minutes or hours (depending on size of export) and will stop the machine.<BR />Please wait until done. For additional options please view CPInfo's usage.<BR />Migrate export succeeded.<BR />Compressing output file...<BR />Compressing output file - done</P><P>I'm concerned with "and will stop the machine".</P><P>Does CPINFO stop services when it runs? I didn't get any indication that it did. I want to be sure before I run CPINFO on our production machines. Would hate for it to interrupt traffic, services, etc.</P><P>&nbsp;</P> Tue, 12 Apr 2022 18:29:01 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPINFO-will-it-stop-services/m-p/146132#M23155 JaySon_2021 2022-04-12T18:29:01Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPINFO-will-it-stop-services/m-p/146134#M23156 <P>You dont need to worry, because migrate export is never done on gateway, only management, so it would stop mgmt access for probably few mins. If you wish to be on safe side, you can simply run something like cpinfo -o /var/log/cpinfo.out</P> <P>Just to clarify, as some people get confused about this...if you do say cpstop on gateway, it will unload the policy. If you do SIC reset , it will load initial policy, which would literally block everything, except ssh and web UI, but only on port 443, thats it.</P> <P>Hope that makes sense.</P> <P>Andy</P> Tue, 12 Apr 2022 19:29:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/CPINFO-will-it-stop-services/m-p/146134#M23156 the_rock 2022-04-12T19:29:07Z